South Carolina Code of Regulations
Chapter 71 - DEPARTMENT OF LABOR, LICENSING AND REGULATION-DIVISION OF LABOR
Article 1 - OCCUPATIONAL SAFETY AND HEALTH REGULATIONS
Subarticle 9 - RULES OF AGENCY PRACTICE AND PROCEDURE CONCERNING SOUTH CAROLINA DEPARTMENT OF LABOR, DIVISION OF OCCUPATIONAL SAFETY AND HEALTH ACCESS TO EMPLOYEE MEDICAL RECORDS
Section 71-908 - Security Procedures

A. Agency files containing personally identifiable employee medical information shall be segregated from other agency files. When not in active use, files containing this information shall be kept secured in a locked cabinet or vault.

B. The SC/OSH Medical Records Officer and the Principal SC/OSH Investigator shall each maintain a log of uses and transfers of personally identifiable employee medical information and lists of coded direct personal identifiers, except as to necessary uses by staff under their direct personal supervision.

C. The photocopying or other duplication of personally identifiable employee medical information shall be kept to the minimum necessary to accomplish the purposes for which the information was obtained.

D. The protective measures established by the subarticle apply to all worksheets, duplicated copies, or other agency documents containing personally identifiable employee medical information.

E. Intra-agency transfers of personally identifiable employee medical information shall be by hand delivery, United State mail, or equally protective means. Inter-office mailing channels shall not be used.